VS Code 1.135 brings GitHub Copilot's cross-model critic into Agent Host sessions, while also adding external session continuation, Agents window refinements and more detailed token-usage reporting.

After rolling out Agent Host functionality across recent VS Code releases, Microsoft is detailing the architecture behind persistent agent sessions and opening its Agent Host Protocol to third-party ...

Open VSX removed three extension IDs from its malicious-extension list between August 16 and August 20, restoring publishing ...

A critical vulnerability in the Node.js sandboxing library, isolated-vm, has exposed a serious risk to AI agents, automation ...

A critical isolated-vm flaw lets untrusted JavaScript escape the V8 sandbox and potentially hijack the host process.

Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are ...

Far, far too many plugins are vibe-coded. A quick look at the Obsidian subreddit will show a dozen plugin announcement ...

The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution ...

keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion monthly downloads. The Wave Six payload hid inside AI agent config files ...

“If you are a mathematician,” one of the world’s leading mathematicians recently wrote, “you may want to make sure you are sitting down before reading further.” And you’ll definitely need to sit down ...